Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: 0NMG11rewSOEJgeEnjDG0p2RUjZHPSTvs05lKozF6e4=
Subject key identifier: F1:8E:79:52:08:31:BE:94:C7:BB:F2:59:8F:83:1E:8C:CE:1B:0B:A8
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019FAA87EEB8F0A4BBD130AC2E3B8D8513A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 089F
Signing time: Tue 28 Jul 2026 21:01:02 +0000
Manifest this update: Tue 28 Jul 2026 21:01:02 +0000
Manifest next update: Wed 29 Jul 2026 21:01:02 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: KEBRSfVB/ZK781xP9f/7sWds8KF6K4LD7b7+LT84GyQ=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ee:b8:f0:a4:bb:d1:30:ac:2e:3b:8d:85:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Jul 28 21:01:02 2026 GMT
Not After : Jul 29 21:01:02 2026 GMT
Subject: CN=f18e79520831be94c7bbf2598f831e8cce1b0ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:79:1b:07:34:12:74:c7:96:93:3e:96:e7:
1c:a3:ba:6b:06:74:76:84:b1:52:ec:48:33:1f:53:
9d:6e:38:5d:bf:79:f5:33:02:61:e1:4b:f1:76:b4:
dd:81:e0:64:01:4e:46:04:71:26:af:40:61:3a:45:
42:1f:62:6d:4c:fd:c8:61:ed:e0:2e:4a:f8:e0:1f:
fa:c9:0a:26:d4:b3:49:e6:7a:a4:f2:ee:cd:64:27:
37:61:85:e7:45:90:86:76:0b:da:f8:34:45:4f:d9:
80:9a:1f:c0:fc:d5:ed:cd:4b:c1:96:47:e3:82:51:
d0:5b:bb:05:a4:ce:a4:30:20:06:45:87:4c:22:97:
36:23:c5:8c:6d:08:90:2d:fd:3c:29:81:9f:3d:50:
bb:34:29:23:ba:5d:a1:3d:9c:0f:29:c5:fb:6d:d7:
a7:0b:15:cc:47:3e:90:1e:55:1f:e0:d2:47:5a:5c:
cc:97:74:6f:7e:91:90:3c:43:02:58:26:9e:be:92:
5f:67:e2:ba:61:b2:09:de:7b:3d:f5:85:76:89:ae:
13:f8:54:3e:13:7f:9f:75:a6:29:95:ad:b3:bd:ee:
d0:68:41:65:43:32:b7:7f:43:93:b2:5e:39:70:fd:
d6:2d:6a:86:95:f1:d1:67:07:0a:ca:5d:da:b4:5d:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8E:79:52:08:31:BE:94:C7:BB:F2:59:8F:83:1E:8C:CE:1B:0B:A8
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9c:a6:63:a1:2c:dc:7c:e7:3a:00:bf:e8:ad:e0:73:fc:a3:
54:73:25:04:0a:07:0d:42:e2:94:e4:db:6e:85:d3:8a:33:c0:
33:f1:ce:2a:4d:bd:db:7e:24:da:b1:ff:0e:a2:7d:ae:61:1a:
a1:78:a3:6f:ed:53:5d:7a:7d:9d:ee:cf:a7:60:84:fe:b6:35:
32:89:cf:15:50:a2:47:57:8b:10:70:c5:09:cd:20:9d:ab:8f:
a8:72:9b:40:e8:85:ea:fd:19:86:63:cf:5b:bf:a2:1b:eb:c1:
ba:6f:e3:06:49:27:d4:4b:19:42:28:fc:5d:85:21:a4:89:03:
76:84:7e:9c:94:32:b4:92:f2:ac:3c:06:10:ec:91:a5:e6:66:
e6:16:37:d7:d1:b7:6c:f1:14:63:1d:1b:a4:42:c0:c7:db:d7:
42:ba:0b:6b:19:a5:c0:1b:56:07:26:fe:6a:00:b5:86:35:fd:
a3:ce:6a:b2:0c:4b:9e:80:f2:03:ef:75:f1:21:96:66:7f:d4:
3d:96:89:19:87:6b:c7:01:89:da:18:e6:8f:e9:ed:10:11:54:
36:d3:22:16:f7:73:ed:49:2f:9a:a9:d6:ad:bd:40:53:6b:3f:
4f:dd:0d:6f:a2:72:32:c2:95:09:b9:93:49:5b:5f:72:d7:7c:
a9:e0:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:42 2026 by rpki-client